$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031663a3a2f34382d3438203d3e20323136303433.roa File: 326130363a313238333a633031663a3a2f34382d3438203d3e20323136303433.roa (raw, json) Hash identifier: XX8C1AozDmXpqv9dzBQTyEko4QWspsT7yYoHU4dP6MI= Subject key identifier: EF:B6:17:4E:13:83:86:02:BB:2B:39:73:35:84:F4:73:1D:9F:C3:81 Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Certificate serial: 10F7E7930CA85AC3F7EE2CCAC2932B4E4907E4DB Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031663a3a2f34382d3438203d3e20323136303433.roa Signing time: Fri 04 Jul 2025 16:08:45 +0000 ROA not before: Fri 04 Jul 2025 16:03:45 +0000 ROA not after: Fri 03 Jul 2026 16:08:45 +0000 asID: 216043 IP address blocks: 2a06:1283:c01f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f7:e7:93:0c:a8:5a:c3:f7:ee:2c:ca:c2:93:2b:4e:49:07:e4:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB Validity Not Before: Jul 4 16:03:45 2025 GMT Not After : Jul 3 16:08:45 2026 GMT Subject: CN=EFB6174E13838602BB2B39733584F4731D9FC381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7f:2a:d9:ff:fd:b1:b0:05:e8:e0:5a:d8:45: c5:c9:57:63:98:a4:0c:fb:d1:11:43:8f:72:db:ad: bb:2d:d9:e8:16:9d:55:7d:2a:4c:a2:d5:01:80:95: 3c:ea:17:23:7c:7c:6e:17:1d:c6:56:cd:c0:ca:f3: bf:0b:e9:69:30:a1:e1:07:08:88:23:24:6c:dc:2b: 73:57:de:69:58:85:45:25:20:2d:17:4d:42:1e:37: 04:92:f5:c5:51:49:d8:92:cd:58:e0:ef:44:77:21: 10:74:3a:6e:9c:12:f3:67:3e:71:d0:d0:3a:12:d2: bb:ef:8a:c9:0d:84:88:f4:04:4d:90:be:14:4e:c0: 7c:87:76:b7:6e:29:c9:58:4a:20:a4:b1:bb:a5:a2: 4e:ac:ad:3e:04:49:84:23:61:e0:a0:ff:c2:23:a3: 79:a2:f8:5c:a0:7a:a6:00:43:84:3a:12:a9:bd:a1: f8:7b:0c:cb:be:25:9b:55:d0:f5:ce:cb:a0:ea:b0: 60:12:60:28:74:5d:f4:4f:b5:02:cc:0e:da:71:98: 34:f3:c0:b2:f9:bf:1c:b2:4e:fa:20:38:01:07:af: c0:02:3a:8c:d6:fa:d1:99:40:8d:c0:de:50:2a:1a: 98:43:90:c6:37:68:e1:22:78:b2:0a:8b:1d:32:0e: 67:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B6:17:4E:13:83:86:02:BB:2B:39:73:35:84:F4:73:1D:9F:C3:81 X509v3 Authority Key Identifier: keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633031663a3a2f34382d3438203d3e20323136303433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:c01f::/48 Signature Algorithm: sha256WithRSAEncryption 12:20:0b:87:14:f0:b4:cf:8c:e7:1c:9d:05:d0:ac:71:94:e5: ee:49:dc:cc:ac:3c:9e:cf:30:ff:cd:5c:10:eb:c2:cf:41:f6: 62:6f:f8:07:2d:08:4a:87:b2:d8:58:09:47:67:98:a0:cd:9c: 86:27:f8:b5:81:ba:a0:f6:51:55:c4:c6:ff:66:c9:87:34:1a: fc:63:8f:ae:a3:c5:83:84:1e:62:5a:24:f2:41:bc:40:67:66: f1:98:52:26:dd:55:6c:d2:31:2e:28:c9:b5:58:37:af:ef:92: 74:01:4d:44:44:0d:f7:58:04:9a:af:2e:a2:21:1b:42:88:1d: f6:25:51:f3:5d:07:29:90:a5:66:f4:e5:d8:f3:30:f7:9e:87: 70:1b:95:d9:70:ad:1c:76:3b:bf:45:0c:cd:49:dd:31:de:54: 15:4f:e3:91:28:7a:06:5f:d7:18:f3:18:89:ed:fb:33:cc:86: d6:43:f6:5c:27:c2:2a:db:a5:81:e8:1d:b9:dc:59:86:61:93: cf:c8:4b:c1:61:71:bf:4e:c5:78:38:4d:41:2d:fd:e3:50:35: 18:9c:e7:ba:18:a2:07:bb:a1:62:7e:6b:eb:3c:21:e8:f7:fc: 75:b4:fd:76:a4:ab:7e:95:74:58:9b:29:92:fb:57:7d:4d:45: bf:79:1a:c5 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUEPfnkwyoWsP37izKwpMrTkkH5NswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0 RjI5QzNGQjAeFw0yNTA3MDQxNjAzNDVaFw0yNjA3MDMxNjA4NDVaMDMxMTAvBgNV BAMTKEVGQjYxNzRFMTM4Mzg2MDJCQjJCMzk3MzM1ODRGNDczMUQ5RkMzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCufyrZ//2xsAXo4FrYRcXJV2OY pAz70RFDj3Lbrbst2egWnVV9Kkyi1QGAlTzqFyN8fG4XHcZWzcDK878L6WkwoeEH CIgjJGzcK3NX3mlYhUUlIC0XTUIeNwSS9cVRSdiSzVjg70R3IRB0Om6cEvNnPnHQ 0DoS0rvviskNhIj0BE2QvhROwHyHdrduKclYSiCksbulok6srT4ESYQjYeCg/8Ij o3mi+FygeqYAQ4Q6Eqm9ofh7DMu+JZtV0PXOy6DqsGASYCh0XfRPtQLMDtpxmDTz wLL5vxyyTvogOAEHr8ACOozW+tGZQI3A3lAqGphDkMY3aOEieLIKix0yDmfzAgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQU77YXThODhgK7KzlzNYT0cx2fw4EwHwYDVR0j BBgwFoAUSAfBGL00iTS1zFmz6KeowU8pw/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzQvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5QzNGQi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNDgwN0MxMThCRDM0ODkzNEI1Q0M1OUIzRThBN0E4QzE0RjI5 QzNGQi5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMt MjA1OC00M2JiLTlhYzYtNWFiNDJkZmJmNDA5LzQvMzI2MTMwMzYzYTMxMzIzODMz M2E2MzMwMzE2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNjMwMzQzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGEoPAHzANBgkqhkiG9w0BAQsFAAOCAQEAEiALhxTwtM+M5xyd BdCscZTl7knczKw8ns8w/81cEOvCz0H2Ym/4By0ISoey2FgJR2eYoM2chif4tYG6 oPZRVcTG/2bJhzQa/GOPrqPFg4QeYlok8kG8QGdm8ZhSJt1VbNIxLijJtVg3r++S dAFNREQN91gEmq8uoiEbQogd9iVR810HKZClZvTl2PMw956HcBuV2XCtHHY7v0UM zUndMd5UFU/jkSh6Bl/XGPMYie37M8yG1kP2XCfCKtulgegdudxZhmGTz8hLwWFx v07FeDhNQS3941A1GJznuhiiB7uhYn5r6zwh6Pf8dbT9dqSrfpV0WJspkvtXfU1F v3kaxQ== -----END CERTIFICATE-----Generated at Sat Jul 5 08:48:38 2025 by rpki-client